Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
File:                     2m5vOSJxlRs1NH-s1RP5Mv5noME.mft (raw, json)
Hash identifier:          TSKLAxK8ELvBW6Tem4Er1UuwbAJnOfF0CYoWYL9gir4=
Subject key identifier:   0A:EA:AB:52:02:D0:54:67:E0:7E:0C:50:CA:FE:DE:E9:07:78:B2:5D
Authority key identifier: DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1
Certificate issuer:       /CN=da6e6f392271951b35347facd513f932fe67a0c1
Certificate serial:       0199FB45BBAE34DF0BA4C2EE3FDC937937AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 07:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:15 +0000
Files and hashes:         1: 2m5vOSJxlRs1NH-s1RP5Mv5noME.crl (hash: vXC8xnJQH0+HYmMxkxYzoSG07uzvV8ua0WplIfMEnUg=)
                          2: OW4gp2pM3Cn0hQw10Qy5ZXKaWok.roa (hash: iuq6/QV3l3hvs9FmkGJh3GnqU/CQ9A049Iob+yz2Lzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:bb:ae:34:df:0b:a4:c2:ee:3f:dc:93:79:37:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6e6f392271951b35347facd513f932fe67a0c1
        Validity
            Not Before: Oct 19 07:01:15 2025 GMT
            Not After : Oct 20 07:01:15 2025 GMT
        Subject: CN=0aeaab5202d05467e07e0c50cafedee90778b25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d6:71:fe:94:a7:ab:37:de:52:1a:85:4e:93:
                    bd:4b:fb:ce:98:e7:22:78:b7:e8:e1:c8:c7:58:4c:
                    dc:77:98:d2:c9:d6:57:c8:6d:ac:f2:c2:ab:ed:91:
                    54:42:56:c3:3a:1c:62:8e:45:27:9a:5f:5c:e8:b6:
                    04:54:dc:a1:0b:69:b4:1e:3b:1a:7a:89:d6:dc:38:
                    3a:b5:02:a0:b0:af:74:08:06:36:c1:b8:c6:a4:3e:
                    6f:c2:79:28:13:ec:fd:72:bb:d9:5c:1a:76:7e:f4:
                    0e:f8:19:0f:0e:bf:16:18:9c:8d:82:0c:37:99:ec:
                    fe:42:b9:75:d0:80:43:04:14:1e:44:59:87:be:f2:
                    a5:6f:1a:25:a9:cd:53:a6:ba:26:1e:a1:7b:dc:dd:
                    ad:2a:84:13:7f:80:1a:59:70:c1:cb:3d:ad:7c:df:
                    ab:81:ff:55:a4:9e:49:fb:d5:84:d6:05:45:ab:d0:
                    55:19:2c:05:d1:b0:3e:f2:4f:5a:fd:75:b4:ea:61:
                    63:d3:6f:9a:03:f6:a5:3b:66:05:82:d4:15:21:42:
                    7a:cc:d8:01:9a:96:72:d7:d7:32:e5:95:82:8d:ff:
                    36:3a:39:9a:ba:5a:d7:e5:f4:40:72:d6:d6:97:5a:
                    22:04:82:90:1b:bd:b6:31:46:ef:ba:e0:fa:d8:ee:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EA:AB:52:02:D0:54:67:E0:7E:0C:50:CA:FE:DE:E9:07:78:B2:5D
            X509v3 Authority Key Identifier:
                keyid:DA:6E:6F:39:22:71:95:1B:35:34:7F:AC:D5:13:F9:32:FE:67:A0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m5vOSJxlRs1NH-s1RP5Mv5noME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b41a9f-348d-4b24-bba0-27647bcef4b0/1/2m5vOSJxlRs1NH-s1RP5Mv5noME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:70:ea:05:b2:98:a5:80:fa:1d:99:b4:9b:c5:61:e4:66:4a:
         38:0c:2f:48:fb:7e:79:06:37:13:ca:d8:a1:f2:8e:0d:6d:b5:
         5f:2f:6a:a2:40:73:13:30:a2:49:1a:67:f9:a2:57:93:ac:e1:
         6b:f1:50:16:f2:58:3e:f3:42:81:00:14:24:16:9b:94:48:e4:
         27:3f:2f:cc:4d:c3:0e:d0:18:aa:ea:56:ef:d4:dd:aa:58:10:
         b2:a7:54:7d:a0:fe:e8:cc:25:f4:63:0d:22:8f:12:f1:1d:78:
         e5:ba:60:94:4b:12:d7:83:c5:02:9b:0e:26:0f:c6:86:40:01:
         0a:07:dd:a1:54:69:9d:f0:b4:de:5a:00:dc:7d:b2:6e:00:6d:
         31:9c:dc:33:92:e9:39:4d:5a:7f:b0:2e:a6:1f:cc:4f:dd:78:
         9d:3c:43:46:52:e2:10:e0:a7:ad:ad:62:24:14:f4:8b:42:58:
         9f:f8:bd:4f:a4:37:3a:56:7c:1b:c5:dd:37:8f:f0:08:9a:a0:
         01:5d:9b:f4:9c:22:80:aa:f6:70:be:e8:d8:53:e9:fc:36:6d:
         c7:e7:97:1a:d1:8c:8a:01:dd:65:6f:79:94:ed:69:3f:54:8a:
         55:b0:f5:6e:02:22:69:05:2c:ff:c1:95:9d:6b:66:b0:20:48:
         62:08:d1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:39 2025 by rpki-client